32 lines
1.1 KiB
Plaintext
32 lines
1.1 KiB
Plaintext
|
# ==============================================
|
||
|
|
# Policy File of /vendor/bin/kisd Executable File
|
||
|
|
|
||
|
|
# ==============================================
|
||
|
|
# Type Declaration
|
||
|
|
# ==============================================
|
||
|
|
|
||
|
|
type kisd, domain;
|
||
|
|
type kisd_exec, exec_type, file_type, vendor_file_type;
|
||
|
|
typeattribute kisd mlstrustedsubject;
|
||
|
|
|
||
|
|
# ==============================================
|
||
|
|
# Common SEPolicy Rule
|
||
|
|
# ==============================================
|
||
|
|
|
||
|
|
init_daemon_domain(kisd)
|
||
|
|
|
||
|
|
allow kisd tee_device:chr_file rw_file_perms;
|
||
|
|
allow kisd provision_file:dir rw_dir_perms;
|
||
|
|
allow kisd provision_file:file create_file_perms;
|
||
|
|
allow kisd kb_block_device:blk_file rw_file_perms;
|
||
|
|
allow kisd kb_block_device:chr_file rw_file_perms;
|
||
|
|
allow kisd dkb_block_device:blk_file rw_file_perms;
|
||
|
|
allow kisd dkb_block_device:chr_file rw_file_perms;
|
||
|
|
allow kisd key_install_data_file:dir w_dir_perms;
|
||
|
|
allow kisd key_install_data_file:file create_file_perms;
|
||
|
|
allow kisd key_install_data_file:dir search;
|
||
|
|
allow kisd mtd_device:chr_file rw_file_perms;
|
||
|
|
allow kisd mtd_device:blk_file rw_file_perms;
|
||
|
|
allow kisd mtd_device:dir search;
|
||
|
|
allow kisd block_device:dir search;
|